CVE-2026-60002

Опубликовано: 09 июл. 2026

Источник: msrc

CVSS3: 7.7

EPSS Низкий

Описание

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 23%

0.003

Низкий

7.7 High

CVSS3

Связанные уязвимости

CVE-2026-60002

CVSS3: 9.4

ubuntu

4 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

redhat

4 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 9.4

nvd

4 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 9.4

debian

4 месяца назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server cha ...

ROS-20261026-80-0165

CVSS3: 9.4

redos

19 дней назад

Уязвимость openssh

EPSS

Процентиль: 23%

0.003

Низкий

7.7 High

CVSS3